GuniWeb SAP MCP

Name: GuniWeb SAP MCP
Author: guniweb

作者：guniweb版本 0.10.0i★ –i在你的电脑上运行

注册名称io.github.guniweb/guniweb-sap-mcp

安装

概览

作者提供的说明（英文原文）

SAP S/4HANA and ECC: OData V2/V4, IDoc and RFC/BAPI for n8n and other MCP clients

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i1 项中通过 1 项依据公开信息检查；尚未扫描代码
使用情况i尚未统计★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 在你的电脑上运行
传输方式: stdio
分类: 其他
你需要填写：SAP_BASE_URL, SAP_PASSWORD

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：1 项中通过 1 项
在你的电脑上运行，拥有你的用户账户的权限（文件、网络、应用）。
需要你自己填写： SAP_BASE_URL, SAP_AUTH_TYPE, SAP_CLIENT, SAP_USERNAME, SAP_PASSWORD, SAP_MCP_DEMO

标为机密的值是你账户的钥匙。千万不要分享给别人，也不要粘贴到聊天里。

你需要

npm已安装 Node.js（用于 npx 命令）

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

打开 Claude Desktop → Settings → Developer → Edit Config，把下面的内容粘贴到 claude_desktop_config.json

{
  "mcpServers": {
    "guniweb-sap": {
      "command": "npx",
      "args": [
        "-y",
        "guniweb-sap-mcp"
      ],
      "env": {
        "SAP_BASE_URL": "your-value",
        "SAP_AUTH_TYPE": "your-value",
        "SAP_CLIENT": "your-value",
        "SAP_USERNAME": "your-value",
        "SAP_PASSWORD": "your-value",
        "SAP_MCP_DEMO": "your-value"
      }
    }
  }
}

在终端中运行这条命令

claude mcp add guniweb-sap --env SAP_BASE_URL=your-value --env SAP_AUTH_TYPE=your-value --env SAP_CLIENT=your-value --env SAP_USERNAME=your-value --env SAP_PASSWORD=your-value --env SAP_MCP_DEMO=your-value -- npx -y guniweb-sap-mcp

运行前请先填写空着的值。

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "guniweb-sap": {
      "command": "npx",
      "args": [
        "-y",
        "guniweb-sap-mcp"
      ],
      "env": {
        "SAP_BASE_URL": "your-value",
        "SAP_AUTH_TYPE": "your-value",
        "SAP_CLIENT": "your-value",
        "SAP_USERNAME": "your-value",
        "SAP_PASSWORD": "your-value",
        "SAP_MCP_DEMO": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "guniweb-sap": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "guniweb-sap-mcp"
      ],
      "env": {
        "SAP_BASE_URL": "your-value",
        "SAP_AUTH_TYPE": "your-value",
        "SAP_CLIENT": "your-value",
        "SAP_USERNAME": "your-value",
        "SAP_PASSWORD": "your-value",
        "SAP_MCP_DEMO": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

这个服务器在你的电脑上运行，而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。

你的选择通过 Cookie 保存在这台设备上，无需账户。

需要你填写的值

SAP_BASE_URL 必填 env
Base URL of the SAP system, including any path segment in front of /sap/opu/odata (e.g. https://s4.example.com or https://gateway.example.com/prefix)
SAP_AUTH_TYPE env
Authentication type: basic, oauth2, apikey, ias, xsuaa, btp-principal, saml-bearer
SAP_CLIENT env
SAP client (Mandant). Appended to every request — a client-dependent Gateway answers 401 without it
SAP_USERNAME env
SAP user for basic authentication
SAP_PASSWORD 机密 env
Password for basic authentication
SAP_MCP_DEMO env
Set to true to start a built-in mock S/4HANA instead of connecting to a real system. No SAP_* configuration needed — for trying the server out

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

它在你的电脑上运行；安装后，工具列表会显示在你的 AI 应用中。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日

✓ 通过
作者与仓库一致
注册名称已通过 GitHub 账户 guniweb 验证，该账户拥有此仓库
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
– 不适用
端点有响应
它在你的电脑上运行，没有互联网端点
– 不适用
使用 OAuth 登录
在你的电脑上运行，改用本地设置
… 尚未检查
工具描述中没有隐藏指令
它在你的电脑上运行；我们只能读取互联网端点的工具列表

与“其他”中的其他服务器比较i

星标数多于此分类中其他 18329 个服务器的 0%
发布到注册中心的时间比此分类中其他 18329 个服务器的 66% 更新
基础检查结果等于或优于此分类中其他 18329 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

GuniWeb SAP MCP 安全吗？

它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

你需要填写：SAP_BASE_URL, SAP_PASSWORD

它在我的电脑上运行还是在云端？

它在你的电脑上运行。你的 AI 应用会在需要时启动它，数据不会经过作者的服务器（除非它自己调用在线服务）。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（0.10.0）于23天前进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。

有什么可以替代它？

同一分类中有：Spec Driven Development, Remote Desktop Commander, Excaliself

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

Spec Driven Development

作者：formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

在你的电脑上运行★ 440MIT14个月前更新

安装

Remote Desktop Commander

作者：desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

在云端运行★ 211前天更新

安装

Excaliself

作者：maciekzygmunt

Find, read, create, edit, and organize Excalidraw drawings in your self-hosted Excaliself instance.

在云端运行今天更新

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

GuniWeb SAP S/4HANA & ECC MCP Server

Designed for n8n, usable from any MCP host. Free to use — built and maintained by GuniWeb.

Connect n8n workflows to SAP S/4HANA and ECC via OData V2, V4, IDocs, and RFC/BAPI using the Model Context Protocol (MCP). Made for AI-assisted, human-governed workflows: the workflow author decides which SAP APIs are called and in what order; the LLM extracts, maps and fills in parameters. Writes are off by default and switched on explicitly, per server and per token.

graph LR

style n8n fill:#4a90d9,color:#fff,stroke:#3a7bc8 style MCP fill:#2d2d2d,color:#fff,stroke:#555 style SAP fill:#1a6fb5,color:#fff,stroke:#0f5a9d style BTP fill:#e8a317,color:#fff,stroke:#c88d14

Features

OData & IDoc

OData V2 + V4 CRUD -- Read, query, create, update, delete with auto version detection
Deep Insert -- Create parent + child entities in one request
Function Imports (V2) & Actions/Functions (V4) -- Trigger SAP business logic
Batch Operations -- Multiple operations in a single $batch request
NL-to-OData Query -- Natural language queries converted to structured OData filters
IDoc Send & Receive -- HTTP/XML based, no RFC dependency

Discovery & Intelligence

Service Discovery -- Auto-discover OData services with 16 business domain categories
Progressive Metadata -- Service catalog -> entity sets -> properties -> query
Smart Query Routing -- Domain-based routing resources for LLM tool selection
Decision-Tree Tool Descriptions -- "When to use / When NOT to use" blocks guide LLMs

Governed tool visibility

4-Tier Tool Registry -- Core / OData / IDoc / RFC tiers with on-demand activation
`sap_enable_tools` -- LLMs activate additional tool tiers at runtime, within the limits you set
Read-only by default (since 0.2.2) -- write tools require --allow-write
Per-token policy (0.3.0) -- readOnly and tool-tier ceilings per Bearer token, only ever more restrictive
IDoc / RFC auto-disable -- tools hidden when the corresponding configuration is missing
MCP Annotations -- readOnlyHint, destructiveHint, idempotentHint on all 22 tools

Authentication (8 Types)

graph TB

subgraph Technical["Technical User Auth"] basic["basic Direct S/4HANA "] userbasic["user-basic Personal SAP login per request "] oauth2["oauth2 BTP Client Credentials "] apikey["apikey Sandbox / Testing "] end subgraph Enterprise["Enterprise Auth (OIDC)"] ias["ias SAP IAS Token "] xsuaa["xsuaa SAP XSUAA Token "] end subgraph Principal["Principal Propagation End-user identity forwarded to SAP "] btp["btp-principal JWT Bearer Exchange via Destination Service "] saml["saml-bearer SAML 2.0 Assertion

RSA-SHA256 Signing "] end

style Technical fill:#2a5f8f,color:#fff,stroke:#1a4f7f style Enterprise fill:#5b8c5a,color:#fff,stroke:#4b7c4a style Principal fill:#8b5e3c,color:#fff,stroke:#7b4e2c

Infrastructure

Two Transport Modes -- stdio and Streamable HTTP (the legacy SSE transport was removed in 0.8.0)
Named destinations (0.3.0) -- one server, several SAP systems; a Bearer token per n8n credential selects the system and its permissions. Static API key still supported
Docker Ready -- Docker Compose for n8n + SAP MCP sidecar
Zero telemetry -- the server talks to the SAP/BTP endpoints you configure and to nothing else. No usage statistics, no update checks, no crash reports
1267 Tests -- Unit, integration, E2E with CI/CD via GitHub Actions

Quick Start

Try it without an SAP system: `--demo`

No SAP system at hand? Start the server against a built-in mock S/4HANA and try every tool from n8n or any MCP client:

npx guniweb-sap-mcp --demo                                   # stdio — n8n MCP Client in command mode

npx guniweb-sap-mcp --demo --transport http --port 8808 # HTTP — n8n MCP Client with URL http://localhost:8808/mcp npx guniweb-sap-mcp --demo --allow-write # also try sap_create / sap_update / sap_delete / sap_batch

The demo starts an in-memory OData V2 gateway on localhost (three services with real SAP field names — API_BUSINESS_PARTNER, API_SALES_ORDER_SRV, API_PRODUCT_SRV; ~20 business partners, 15 sales orders with items, 10 products) and points the server at it. It behaves like a Gateway where it matters: catalog discovery, $metadata, $filter/$expand/paging, CSRF tokens, ETags, deep insert, function imports, $batch with changesets, SAP-style error payloads. Sample data only — nothing is real, nothing leaves your machine, and changes are gone when the process ends. Also SAP_MCP_DEMO=true (e.g. in Docker). A workflow you build against the demo runs against a real system after you replace --demo with your SAP_* configuration.

1. Install

npm install -g guniweb-sap-mcp

Or run it as a container: docker run --rm -p 8808:8808 -e SAP_MCP_DEMO=true ghcr.io/guniweb/guniweb-sap-mcp:latest

2. Configure

export SAP_BASE_URL=https://your-sap-system.example.com

export SAP_AUTH_TYPE=basic export SAP_USERNAME=your-user export SAP_PASSWORD=your-password export SAP_CLIENT=100 # do not omit: without it a client-dependent Gateway

answers 401 "Anmeldung fehlgeschlagen", which looks

like a wrong password but is not one

3. Run

# stdio (default) -- for n8n MCP Client in command mode

guniweb-sap-mcp

HTTP -- for n8n MCP Client in URL mode or Docker

guniweb-sap-mcp --transport http --port 8808

With tool tier control

guniweb-sap-mcp --transport http --port 8808 --tiers core,odata guniweb-sap-mcp --transport http --port 8808 --allow-write # writes are OFF by default

Production: authenticate the MCP endpoint AND the inbound IDoc webhook

guniweb-sap-mcp --transport http --port 8808 --api-key --webhook-secret

Run as a container

# Look around first — mock S/4HANA inside the container, no SAP system needed

docker run --rm -p 8808:8808 -e SAP_MCP_DEMO=true ghcr.io/guniweb/guniweb-sap-mcp:latest

Against a real system (pin the version in production)

docker run -d --name sap-mcp -p 8808:8808 --env-file .env \ ghcr.io/guniweb/guniweb-sap-mcp:

Flags go straight to the server — writes stay off unless you say so

docker run -d -p 8808:8808 --env-file .env \ ghcr.io/guniweb/guniweb-sap-mcp: --allow-write

The image is built from the published npm package, not from a second build path — what runs in the container is the artifact you would have installed with npm install, so the two cannot drift apart. HTTP transport on port 8808 is the default inside the image (SAP_MCP_TRANSPORT / SAP_MCP_PORT); it runs as a non-root user, answers a health check on /healthz, and is published for linux/amd64 and linux/arm64 with build provenance.

Not included: RFC/BAPI. That path needs the SAP NW RFC SDK, which SAP licenses to customers only and which therefore cannot ship in a public image. Everything else — OData V2/V4, IDoc over HTTP/XML — works. For RFC, install the SDK on the host and run the server from npm (Setup for SAP ECC).

A docker-compose.yml that puts n8n next to the server is in the repository.

Production hardening

Variable / Flag	Default	Description
`--tool-timeout` / `SAP_MCP_TOOL_TIMEOUT`	`30` (seconds)	Time budget for a whole tool call, however many SAP requests it makes. On expiry the client gets a valid MCP response with `truncated: true` and a plain-language reason — never a hanging connection. Paginated reads return the pages fetched so far. `0` disables the budget (logged as a warning at startup)
`SAP_HTTP_TIMEOUT_MS`	`30000`	Timeout for a single outbound SAP request (ms). Hanging gateways fail fast with a structured `TIMEOUT` error instead of stalling the n8n agent. Capped by whatever is left of the tool budget above
`--cache-dir` / `SAP_CACHE_DIR`	_(unset = in-memory only)_	Persist the catalog and metadata caches to disk so a restart does not refetch them. Without it every restart re-reads the full catalog — on a system with over a thousand services that is the cold start that breaks client timeouts. n8n evicts its own client entry on a transport error, so restarts are not rare
`SAP_CA_CERT`	_(unset)_	Path to the root CA that signs your SAP certificate — the documented way past a corporate PKI. Mirrored into `NODE_EXTRA_CA_CERTS`. Prefer this over `SAP_TLS_VERIFY=false`, which disables the check rather than solving it
`--concurrency` / `SAP_CONCURRENCY`	`5`	Upper bound on simultaneous SAP requests where several are unavoidable
`--allow-write` / `SAP_MCP_ALLOW_WRITE`	_(unset = read-only)_	Since 0.2.2 the server is read-only by default. `sap_create`, `sap_update`, `sap_delete`, `sap_function` and `sap_idoc_send` are not registered at all until you set this — a tool an agent cannot see is a tool it cannot call by accident. `--read-only` is still accepted and now simply describes the default
`SAP_JWT_ISSUER`	_(unset = no verification)_	Issuer whose JWKS is used to verify incoming user tokens. Without it tokens are only decoded, and the resulting identity is marked `verified: false` — safe to forward to SAP (SAP verifies itself), but not safe to base a local decision on. With it, a token failing verification is rejected with `401` rather than silently downgraded to the technical user
`SAP_WEBHOOK_SECRET` / `--webhook-secret`	_(unset = open + startup warning)_	Shared secret for the inbound IDoc webhook. Accepts `Authorization: Bearer` or HTTP Basic auth whose password equals the secret (matches SAP SM59 HTTP destinations)
`SAP_WEBHOOK_HOST` / `--webhook-host`	all interfaces	Bind address of the standalone IDoc webhook (stdio mode). Set `127.0.0.1` behind a reverse proxy
`SAP_WEBHOOK_MAX_BODY_BYTES`	`10485760` (10 MB)	Reject larger IDoc payloads with `413` before they are buffered in memory

In HTTP transport mode the /idoc route is mounted on the MCP port: with --webhook-secret it authenticates independently of --api-key (so SAP's Basic auth works while n8n uses the Bearer key); without it, it falls under --api-key if set — and is open if neither is configured (the server logs a warning at startup).

Both timeouts must stay below the smallest client limit in your setup. Typical limits: a reverse proxy such as Cloudflare aborts at 100 s (524), n8n's MCP client transport at 300 s. A budget above the smallest limit never takes effect, because the client gives up first.

Tracing a slow tool call

Every tool call logs one line on completion, carrying a correlation id that also appears on each SAP request it triggered:

{"correlationId":"a3f19c8b2d04","tool":"sap_discover_services","outcome":"ok","durationMs":842,"sapCalls":1,"resultBytes":18422}

grep a3f19c8b2d04 then shows the full story of that one call — including how many SAP requests it produced. outcome is one of ok, error, timeout (budget expired) or `aborte

只显示了开头部分；其余内容请在仓库中阅读